Phát Tạ Tiến

Monitored and investigated suspicious activities using Splunk to track malicious IPs and detect anomalies, ensuring proactive threat mitigation. Applied NIST, Cyber Kill Chain, and MITRE ATT&CK frameworks to identify and prevent cyber threats, maintaining system integrity. Optimized SIEM systems by fine-tuning correlation rules, enhancing log ingestion, and improving query performance for efficient threat detection.

Cyber Security Engineer Intern at THD CyberSecurity (2024-06 – 2025-01)

• Monitored and investigated suspicious activities using Splunk to track malicious IPs and detect anomalies, ensuring proactive threat mitigation.
• Applied NIST, Cyber Kill Chain, and MITRE ATT&CK frameworks to identify and prevent cyber threats, maintaining system integrity.
• Optimized SIEM systems by fine-tuning correlation rules, enhancing log ingestion, and improving query performance for efficient threat detection.
• Analyzed user and system behaviors to detect potential insider threats and security breaches.
• Documented incident investigations, analysis results, and mitigation strategies in detailed technical reports for stakeholders.

Security Operation Center Analyst at IPSIP - VietNam (2025-04 – Present)

• Analyzed and investigated security alerts on SIEM and EDR systems to identify potential threats and abnormal activities.
• Correlated events across different sources and applied frameworks such as NIST, Cyber Kill Chain, and MITRE ATT&CK to assess incident severity.
• Contacted customers to provide guidance on alert handling, coordinated response actions, and recommended mitigation measures.
• Documented investigation processes, findings, and remediation steps in detailed technical reports for internal teams and clients.
• Created clear documentation and mini-guides for common SOC tasks, supporting team knowledge sharing and onboarding.

Bachelor of Information Security in Information Security – Posts and Telecommunications Institute of Technology (2021 – 2026)